Data Processing Addendum
The processor terms for the contact data you put through Mule Mail.
Last updated May 17, 2026
This document is operator-provided content for the Mule Mail product and should be reviewed by qualified counsel before public launch.
1. Roles
For contact data uploaded and sent through Mule Mail, the customer is the data controller and Mule Digital is the data processor. This Addendum forms part of the Terms of Service.
2. Scope of processing
We process contact data only to provide the service: import, segmentation, rendering, delivery, the tracking the customer enables, suppression, and reporting. We do not use contact data for our own purposes and never sell it.
3. Customer instructions
We act on the customer's documented instructions, which are the configuration and actions taken in the product. We tell the customer if an instruction appears to breach applicable data protection law.
4. Confidentiality and security
Personnel with access are bound by confidentiality. We apply technical and organisational measures appropriate to the risk: encryption in transit, access controls, least-privilege internal access, and logging.
5. Sub-processors
The customer authorises the use of sub-processors for delivery, storage, payments, and monitoring. We maintain the list and give notice of changes, with a window to object.
6. Data subject requests
The product lets the customer access, export, correct, and delete contact data directly. Where a data subject contacts us, we refer them to the relevant customer and assist as required.
7. Personal data breach
We notify affected customers without undue delay after becoming aware of a personal data breach, with the information needed for the customer to meet its own obligations.
8. Deletion and return
On termination, the customer can export data during the wind-down period. After that we delete contact data, except the suppression hash retained to prevent re-mailing a deleted address.
9. Audits
We make available the information needed to demonstrate compliance and support reasonable audits, subject to confidentiality and scheduling.
Contact: dpo@blastforge.com.